LastPass Prompting Users to Change Passwords Due to Hack

With the recent federal government hack, online security’s taken center stage. At some romproint, someone may have suggested to you that a password manager is a good idea.

However, LastPass, one of the most popular password managers, revealed that it is investigating “suspicious activity”. To be clear, this doesn’t mean that passwords were stolen — LastPass encrypts its users’ logins and passwords. But what was stolen were email addresses, password reminders, server per user salts and authentication hashes.

LastPass stated that the user salts and authentication hashes could mean that users with simple master passwords could be in danger of having their encryption broken. However, the company is forcing all users to change their passwords.